Shomi is a WordPress plugin designed for AI agents, providing the following features:

Secure Communication: All API interfaces use RSA-SHA256 signature verification
Product Search: Support searching products by keywords, returning complete product information
Order Creation: Create WooCommerce orders through API
Order Management: Query order status, mark orders as paid
One-click Initialization: Automatically generate shared key, simplify configuration process
Anti-replay Attack: Use timestamp and nonce mechanism to prevent API abuse
Multilingual Support: Supports English and Chinese languages, with English as the default

This plugin is an important component of the shopping assistant system, tightly integrated with Agent backend service B to achieve end-to-end assistance from product selection to payment. Only authenticated Agent backend service B can call the plugin’s API interfaces, ensuring system security.

The plugin mounts Agent frontend components through external CDN to provide shopping assistant functionality.

External Services

This plugin uses external services provided by Antom to deliver the shopping assistant functionality.

What the service is used for:
– Loading the assistant frontend JavaScript components (CDN delivery)
– Sending user messages/inputs to the assistant service to generate responses

Domains/resources:
– https://gw.alipayobjects.com/render/p/yuyan_npm/@alipay_paymentagent/1.0.0/lib/CommonEntry.js
– https://gw.alipayobjects.com/render/p/yuyan_npm/@alipay_paymentagent/1.0.0/lib/CommonProduct.js
– https://dashboard-apiv2.antom.com/ai/online/portal/api/bot/chat(assistant API)

When data is sent:
– The CDN scripts are loaded only on frontend pages (never in wp-admin).
– User input is sent when a visitor interacts with the assistant (e.g. submits a question or form fields in the assistant UI).

What data is sent:
– Standard HTTP request data to the CDN/API (e.g. IP address, user agent, referrer, and time of request).
– The user’s messages/questions to the assistant and any information the user enters into the assistant UI.

Data retention:
– Requests are processed to generate a response and are not stored longer than necessary.

Terms of Service: https://docs.antom.com/ac/plugins/terms_of_service
Privacy Policy: https://docs.antom.com/ac/plugins/privacy_policy

Security

All incoming requests from Antom are secured using RSA-SHA256 digital signatures.
Antom signs each request with its private key, and this plugin verifies the signature using the official Antom public key you configure in settings.
This ensures requests are authentic and have not been tampered with during transmission.

Does the plugin support multiple languages?

Yes, the plugin supports both English and Chinese languages. English is the default language, and the plugin will automatically use the user’s WordPress language setting. If the user’s language is not supported, it will fall back to English.